{
  "tool_id": "art-583-beacon-seeded-fair-sampling-deriver",
  "kernel_id": "art-583-beacon-seeded-fair-sampling-deriver",
  "display_name": "Beacon-Seeded Fair-Sampling Deriver",
  "tool_version": "1.0.0",
  "mandate_type": "compliance_control",
  "purpose": "Derives a deterministic, offline-replayable audit sample by HMAC-DRBG (SHA-256) seeded from a caller-pasted public randomness beacon pulse (drand quicknet or NISTIR-8213) combined with an item-manifest hash committed before the pulse round. Emits the selected item indices plus a full per-draw derivation transcript (seed, per-draw HMAC output, candidate index, accept/reject) so an examiner re-derives the identical sample offline from the transcript alone. Verdict DERIVED, or INDETERMINATE when inputs are missing or malformed. The beacon pulse, its round and its randomness are caller-declared inputs: the kernel performs SHA-256/HMAC math only, never fetches a pulse and never verifies the pulse's BLS signature, so a sample is only as trustworthy as the pulse the caller supplied. Committing the item-manifest hash before the pulse round is what makes the selection cherry-pick-proof, and the page teaches that ordering. Extends the assurance and workpaper family; cross-links the shipped art-471 disposition-sampling-frame rather than duplicating it.",
  "control_description": "Derives a deterministic, offline-replayable audit sample by HMAC-DRBG (SHA-256) seeded from a caller-pasted public randomness beacon pulse (drand quicknet or NISTIR-8213) combined with an item-manifest hash committed before the pulse round. Emits the selected item indices plus a full per-draw derivation transcript (seed, per-draw HMAC output, candidate index, accept/reject) so an examiner re-derives the identical sample offline from the transcript alone. Verdict DERIVED, or INDETERMINATE when inputs are missing or malformed. The beacon pulse, its round and its randomness are caller-declared inputs: the kernel performs SHA-256/HMAC math only, never fetches a pulse and never verifies the pulse's BLS signature, so a sample is only as trustworthy as the pulse the caller supplied. Committing the item-manifest hash before the pulse round is what makes the selection cherry-pick-proof, and the page teaches that ordering. Extends the assurance and workpaper family; cross-links the shipped art-471 disposition-sampling-frame rather than duplicating it.",
  "declared_inputs": [],
  "declared_outputs": [],
  "kernel_digest": "sha256:00bf25e2ac76c12d2bc9de448a1c9d767c67581310b599637d193d2f949b708a",
  "trust_label": "independently verified: zkVM execution proof (risc0/groth16-bn254)",
  "data_vintage": "2026-08-07",
  "last_validated": "2026-08-07",
  "conformance_fixtures_vendored": true,
  "compute_proof_ready": "ready",
  "wave": 82,
  "source_url": "https://ainumbers.co/chaingraph/art-583-beacon-seeded-fair-sampling-deriver.html",
  "generated_at": "2026-08-15T11:12:17.704Z"
}